DEFAULT

Every type in its caller's tenant, and no cross-tenant read.